General
- Target 2026-08-07_315415ac5c4ab1ce735b3f46b24c10e6_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 12.8MB
- Sample260808-b1nq2axerd
- SHA256 c6f0fd9b9aa14bbc5235643386eca212506d0f23cd300bab0c520139d407e459
- MD5 315415ac5c4ab1ce735b3f46b24c10e6
- SHA1 2cc3c3bbc641c5a509642966185920bbeb81eb79
- SHA512 f4b80f8924a033414174fc21087507e095195f1f7af5558a4062a496056546f4afd17515fa86edcbcfd6aa1bd6199ff03e1a8b906aadb71bb0e52ae86922ff4d
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2VjnmWgu5x6M1Poq2Vjnm4u5x6M1wu5x:nDGnuPDGn/zDGnuPDGn/ej
- TLSH T117D68D05B6A881F4D2E6C67445A6C777F37178054B349BEF8365CA1E2E33AD09E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_315415ac5c4ab1ce735b3f46b24c10e6_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_315415ac5c4ab1ce735b3f46b24c10e6_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_315415ac5c4ab1ce735b3f46b24c10e6_cobalt-strike_elex_emotet_glassworm_icedid_remcos_vidar
- Size 12.8MB
- SHA256 c6f0fd9b9aa14bbc5235643386eca212506d0f23cd300bab0c520139d407e459
- MD5 315415ac5c4ab1ce735b3f46b24c10e6
- SHA1 2cc3c3bbc641c5a509642966185920bbeb81eb79
- SHA512 f4b80f8924a033414174fc21087507e095195f1f7af5558a4062a496056546f4afd17515fa86edcbcfd6aa1bd6199ff03e1a8b906aadb71bb0e52ae86922ff4d
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2VjnmWgu5x6M1Poq2Vjnm4u5x6M1wu5x:nDGnuPDGn/zDGnuPDGn/ej
- TLSH T117D68D05B6A881F4D2E6C67445A6C777F37178054B349BEF8365CA1E2E33AD09E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry